2a51f24dfb392c231ac10e81841cd88e_JaffaCakes118 | Triage

Sharing

General

Target

2a51f24dfb392c231ac10e81841cd88e_JaffaCakes118
Size

260KB
MD5

2a51f24dfb392c231ac10e81841cd88e
SHA1

4651ee8e43f80b92b38eb2535ae54be0458334f0
SHA256

de00b3740ab3d3820225c01b410ef52607ae81c19b4ab9dfb8408b6823ce1f80
SHA512

08158754cfe2d257808f40b6c4a42c4df24eb3f4453d5bc5b860012bc8cbc67817c9580322bc981720e8edc550502293e003e49fb66ea911c387f41e628cffd0
SSDEEP

3072:HibTTp78CcCBPAG4vQFsqI07yMpo/GnYCrJ1kNfC/eb0oqG:oT14KPYvVMpAsWfC2b0oqG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a51f24dfb392c231ac10e81841cd88e_JaffaCakes118

Files

2a51f24dfb392c231ac10e81841cd88e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

89710c7d4d8bf03322e48fa40e2124ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
_adjust_fdiv
_ftol
free
malloc

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
SetErrorMode
LoadLibraryA
GetProcAddress

Exports

Exports

JgaCreateAudioDecode
JgaDecodeAudio
JgaDestroyAudioDecode
JgaQueryAudioDecode

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE